Threats tagged 'ghsa-ff68-vpqw-wj7c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-110959The Descope WordPress plugin before 1.2.0 does not validate the authentication token it receives before creating a High2026-11-12GCVE DatabaseCVE-2026-110959 The Descope WordPress plugin versions before 1.2.0 contain a vulnerability where the plugin does not validate authentication tokens before creating WordPress sessions. This allows an unauthenticated attacker to obtain a session for any existing user account, including administrators, by supplying the target account's email address. Report on CVE-2026-110959 Vulnerability #ghsa-ff68-vpqw-wj7c	GCVE Database	2026-11-12

Page 1 of 1